AMENDMENTS TO THE CLAIMS 

1 . (Currently Amended) An anti-virus system for an electronic mail message, the system 
comprising a computer comprising a computer-readable medium storing : 

a detector component configured to detect detecting means for determining the 
presence of the electronic mail message, wherein the electronic mail message includes at 
least one message text; 

an analyzing component configured to analysis and scanning means for : (i) 
analyzing and scanning analyze and scan the message text for script tags that indicate the 
presence of operable program code, and (ii) removing remove any such script tags and 
operable program code from the message text, regardless of whether the script tags and 
operable program code are associated with a known virus; and 

an application component configured to apply application means for applying the 
electronic mail message, with the script tags and operable program code removed from 
the message text r to a server means . 

2. (Currently Amended) The anti- virus system as claimed in claim 1, wherein the 
electronic mail message further includes at least one attachment, 

wherein the detector component is detecting means for determining the presence of the 
electronic mail message further comprise configured decomposition means for breaking the 
electronic mail message into at least the message text and attachment, 

wherein the analyzing component is further configured analysis and scanning means 
comprise scanning means for scanning each of the message text and attachment, and 
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wherein the application component is further configured application means for applying 
the electronic mail message, with the script tags and operable program code removed from the 
message text, to server means includes recomposition means for rebuilding the electronic mail 
message from the message text and attachment. 

3. (Previously Presented) The anti-virus system as claimed in claim 1, wherein the script 
tags comprise predetermined character strings. 

4. (Currently Amended) The anti- virus system as claimed in claim 1, wherein the 
application means for applying the electronic mail message, with the script tags and operable 
program code removed from the message text, to server means comprise replacement means 
application component is further configured for replacing the removed script tags and operable 
program code with alternative text. 

5. (Previously Presented) The anti-virus system as claimed in claim 4, wherein the 
alternative text informs a recipient of the electronic mail message that operable program code 
has been removed. 

6. (Currently Amended) The anti- virus system as claimed in claim 2, wherein the 
analyzing component analysis and scanning means include scanning means is further configured 
for scanning one or more attachments for operable macros. 
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7. (Currently Amended) The anti-virus system as claimed in claim 2, wherein the system 
further comprises quarantine means a quarantine component configured for at least one of: (i) 
quarantining a message text containing operable program code, and (ii) removing from the 
electronic mail message and quarantining an attachment containing a macro or operable program 
code. 

8. (Currently Amended) The anti- virus system as claimed in claim 7, wherein the 
quarantine means quarantine component is further configured comprise means for removing a 
macro from the attachment containing a macro or operable program code, quarantining the 
macro, and releasing the attachment with the macro removed. 

9. (Currently Amended) The anti- virus system as claimed in claim 7, wherein the 
quarantine means quarantine component is further configured comprise means for; 

storing one of the attachment and macro in a quarantine storage location as a quarantined 

item; 

receiving means for receiving an input indicating a decision to deliver the quarantined 
item to an intended recipient; and 

responsive to the decision input, either one of : (i) releasing the quarantined item with the 
operable code removed from the quarantined item, for delivery to an intended recipient, and (ii) 
releasing the quarantined item with the operable code included in the quarantined item, for 
delivery to the intended recipient, and or (iii) deleting the quarantined item. 
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10. (Currently Amended) The anti-virus system as claimed in claim 7, wherein the 
quarantine means quarantine component is further configured comprise means for, responsive to 
deleting the quarantined item, informing at least one of an intended recipient and a sender of the 
message that the quarantined item has been deleted without being delivered to the intended 
recipient. 

11. (Currently Amended) The anti-virus system as claimed in claim 6, wherein the 
analyzing component is further configured scanning means for scanning one or more 
attachments for operable macros further comprise means for sequentially scanning the one or 
more attachments for a plurality of predetermined character strings indicative of a macro. 

12. (Currently Amended) The anti- virus system as claimed in claim 11, wherein the 
analyzing component is further configured means for scanning one or more attachments for a 
plurality of predetermined character strings further comprise termination means for terminating 
scanning when one of the plurality of predetermined strings is not found on completely scanning 
the one or more attachments. 

13. (Currently Amended) The anti-virus system as claimed in claim 1, wherein the 
detecting means for determining the presence of the electronic mail message detector component 
is further comprise configured for capturing one or more electronic mail messages passing 
between a first network and a second network. 
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14. (Currently Amended) The anti- virus system as claimed in claim 13, wherein the 
detecting means for determining the presence of the electronic mail message detector component 
is further comprise configured for capturing one or more electronic mail messages passing 
between an internal or private network and an external or public network. 

15. (Currently Amended) A method of providing anti-virus protection for an electronic 
mail message, wherein the electronic mail message comprises at least one message text, the 
method comprising: 

(a) capturing the electronic mail message; 

(b) scanning the message text for script tags that indicate the presence of operable 
program code; 

(c) removing the script tags and operable program code from the message text , 
regardless of whether the script tags and operable program code are associated with a known 
virus; and; 

(d) releasing the electronic mail message, with the script tags and operable program code 
removed from the message text. 

16. (Previously Presented) The method as claimed in claim 15, wherein step (c) 
comprises quarantining the electronic mail message or a portion of the electronic mail message 
containing operable program code. 
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17. (Previously Presented) The method as claimed in claim 15, wherein the electronic 
mail message further includes at least one attachment, wherein step (a) further comprises 
dividing the electronic mail message into at least the message text and attachment, 

wherein step (b) further comprises scanning the message text and attachment, and 
wherein step (d) further comprises rebuilding the electronic mail message from at least 
the message text and attachment. 

18. (Previously Presented) The method as claimed in claim 15, wherein the script tags 
comprise predetermined character strings. 

19. (Currently Amended) The method as claimed in claim 15, wherein step (c) further 
comprises replacing the removed script tags and operable program code with alternative text. 

20. (Previously Presented) The method as claimed in claim 19, wherein the alternative 
text informs a recipient of the electronic mail message that operable program code has been 
removed. 

21. (Currently Amended) The method as claimed in claim 17, wherein step (b) further 
comprises scanning one or more attachments for macros, and wherein step (c) further comprises, 
responsive to finding a macro: (i) removing the macro from the electronic mail message the 
macro , and (ii) quarantining at least one of the macro and the attachment containing the macro. 
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22. (Previously Presented) The method as claimed in claim 16, wherein quarantining the 
electronic mail message or a portion of the electronic mail message comprises: 

storing the electronic mail message or the portion of the electronic mail message in a 
quarantine storage location as a quarantined item; 

receiving a decision whether the quarantined item may be delivered to an intended 
recipient; and 

responsive to receiving the decision, one of: (i) releasing the quarantined item with the 
operable code or macro deleted from the quarantined item, for delivery to an intended recipient, 
(ii) releasing the quarantined item with the operable code included in the quarantined item, for 
delivery to the intended recipient, and (iii) deleting the quarantined item. 

23. (Previously Presented) The method as claimed in claim 22, wherein deleting the 
quarantined item further comprises informing at least one of the intended recipient and a sender 
of the message that the quarantined item has been deleted without being delivered to the 
intended recipient. 

24. (Previously Presented) The method as claimed in claim 21, wherein step (b) further 
comprises sequentially scanning the one or more attachments for a plurality of predetermined 
character strings indicative of a macro. 

25. (Previously Presented) The method as claimed in claim 24, wherein step (b) further 
comprises terminating when one of the plurality of predetermined strings is not found in the 
attachment. 
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26. (Previously Presented) The method as claimed in claim 15, wherein step (a) 
comprises capturing the electronic mail message passing between a first network and a second 
network. 

27. (Previously Presented) The method as claimed in claim 26, wherein step (a) 
comprises capturing the electronic mail message passing between an internal or private network 
and an external or public network. 

28. (Previously Presented) A computer program comprising code means for performing 
all the steps of the method of claim 15 when the program is run on one or more computers. 

29. (Previously Presented) The computer program as claimed in claim 28, wherein the 
computer program is embodied on a computer-readable medium. 

30. (Previously Presented) A computer program product comprising program code means 
stored in a computer-readable medium for performing the method of claim 15, when that 
program product is run on one or more computers. 

3 1 . (Currently Amended) The anti-virus system as claimed in claim 1 , wherein the 
electronic mail message further includes at least one attachment, and wherein the analyzing 
component is further configured the system further comprising : 
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decomposition means fo r: (i) dividing the electronic mail message into at least the 
message text and attachment[[;]] _analysis and scanning means for: (i) (ii) analyzing and scanning 
the attachment for a macro, and (ii) (m) regardless of whether the macro is associated with a 
known virus, at least one of: (a) deleting the attachment, (b) quarantining the attachment, (c) 
removing any such macro from the attachment and quarantining the macro, and (d) removing 
any such macro from the attachment and deleting the macro. 

32. (Currently Amended) The anti- virus system as claimed in claim 31, further 
comprising wherein the application component is further configured reassembling means for 
reassembling the electronic mail message from at least the message text and attachment, with the 
macro removed from the attachment. 

33. (Previously Presented) The method as claimed in claim 15, wherein the electronic 
mail message further includes at least one attachment, the method further comprising: 

scanning the attachment for one or more macros; and 

regardless of whether a macro is associated with a known virus, at least one of: (a) 
deleting the attachment, (b) quarantining the attachment, (c) removing any such macro from the 
attachment and quarantining the macro, and (d) removing any such macro from the attachment 
and deleting the macro. 

34. (Previously Presented) The method as claimed in claim 33, further comprising 
reassembling the electronic mail message from at least the message text and attachment, with the 
macro removed from the attachment. 
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35. (Currently Amended) The anti-virus system of claim 9, further comprising storage 
means wherein the quarantine component is further configured for storing a list of persons 
authorized to approve a quarantined ite m, wherein receiving means and for receiving an input 
further comprises receiving the decision from a person that is included on the stored list of 
authorized persons. 

36. (Previously Presented) The method as claimed in claim 22, further comprising storing 
a list of persons authorized to approve quarantined items, wherein receiving a decision whether 
the quarantined item may be delivered to an intended recipient further comprises receiving the 
decision from a person that is included in the stored list of authorized persons. 

37. (New) The computer program as claimed in claim 28, wherein step (c) comprises 
quarantining the electronic mail message or a portion of the electronic mail message containing 
operable program code. 

38. (New) The computer program as claimed in claim 28, wherein the electronic mail 
message further includes at least one attachment, wherein step (a) further comprises dividing the 
electronic mail message into at least the message text and attachment, 

wherein step (b) further comprises scanning the message text and attachment, and 
wherein step (d) further comprises rebuilding the electronic mail message from at least 
the message text and attachment. 
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39. (New) The computer program as claimed in claim 28, wherein the script tags 
comprise predetermined character strings. 

40. (New) The computer program as claimed in claim 28, wherein step (c) further 
comprises replacing the removed operable program code with alternative text. 

41. (New) The computer program as claimed in claim 40, wherein the alternative text 
informs a recipient of the electronic mail message that operable program code has been removed. 

42. (New) The computer program as claimed in claim 38, wherein step (b) further 
comprises scanning one or more attachments for macros, and wherein step (c) further comprises, 
responsive to finding a macro: (i) removing the macro from the electronic mail message, and (ii) 
quarantining at least one of the macro and the attachment containing the macro. 

43. (New) The computer program as claimed in claim 37, wherein quarantining the 
electronic mail message or a portion of the electronic mail message comprises: 

storing the electronic mail message or the portion of the electronic mail message in a 
quarantine storage location as a quarantined item; 

receiving a decision whether the quarantined item may be delivered to an intended 
recipient; and 

responsive to receiving the decision, one of: (i) releasing the quarantined item with the 
operable code or macro deleted from the quarantined item, for delivery to an intended recipient, 
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(ii) releasing the quarantined item with the operable code included in the quarantined item, for 
delivery to the intended recipient, and (iii) deleting the quarantined item. 

44. (New) The computer program as claimed in claim 43, wherein deleting the 
quarantined item further comprises informing at least one of the intended recipient and a sender 
of the message that the quarantined item has been deleted without being delivered to the 
intended recipient. 

45. (New) The computer program as claimed in claim 42, wherein step (b) further 
comprises sequentially scanning the one or more attachments for a plurality of predetermined 
character strings indicative of a macro. 

46. (New) The computer program as claimed in claim 45, wherein step (b) further 
comprises terminating when one of the plurality of predetermined strings is not found in the 
attachment. 

47. (New) The computer program as claimed in claim 28, wherein step (a) comprises 
capturing the electronic mail message passing between a first network and a second network. 

48. (New) The computer program as claimed in claim 47, wherein step (a) comprises 
capturing the electronic mail message passing between an internal or private network and an 
external or public network. 
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